General
- Target 9e2511754282827d601af6fb94c2f6c5631baefbe33f6e08dc8e8f20c321963a
- Size 2.6MB
- Sample260421-aydbvaat3v
- SHA256 9e2511754282827d601af6fb94c2f6c5631baefbe33f6e08dc8e8f20c321963a
- MD5 11cde346808263740e65801290b2423f
- SHA1 1e2d19130160ea02cbf245897e8579499916ec94
- SHA512 985fb5754dd6cdb53b9fa4dbd4b382934492192c8fcacd747a1efc52b11f06e46e0ddc8aafccf5de1ac81d7c0f6535d7fd849e2fd293058f6f897c98a5afb6c6
- SSDEEP 49152:GTGkQy56/OJdJCXDrsOFZMjHfUTGkQy5QZuTtS0rQMYOF:GKkVkOhCXHHFZMjHfUKkVWsM0r1F
- TLSH T140C59F31B7818036D1B7427186FA47BBA5297C211715A5CF73C87A2A1FB36D2AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
9e2511754282827d601af6fb94c2f6c5631baefbe33f6e08dc8e8f20c321963a.exe
Resource
win10v2004-20260130-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 9e2511754282827d601af6fb94c2f6c5631baefbe33f6e08dc8e8f20c321963a
- Size 2.6MB
- SHA256 9e2511754282827d601af6fb94c2f6c5631baefbe33f6e08dc8e8f20c321963a
- MD5 11cde346808263740e65801290b2423f
- SHA1 1e2d19130160ea02cbf245897e8579499916ec94
- SHA512 985fb5754dd6cdb53b9fa4dbd4b382934492192c8fcacd747a1efc52b11f06e46e0ddc8aafccf5de1ac81d7c0f6535d7fd849e2fd293058f6f897c98a5afb6c6
- SSDEEP 49152:GTGkQy56/OJdJCXDrsOFZMjHfUTGkQy5QZuTtS0rQMYOF:GKkVkOhCXHHFZMjHfUKkVWsM0r1F
- TLSH T140C59F31B7818036D1B7427186FA47BBA5297C211715A5CF73C87A2A1FB36D2AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory